Known CVE

MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass

MLflow > 3.15.0 contains an information disclosure vulnerability caused by improper validation of webhook URLs allowing attackers to reach internal or cloud metadata services and obtain response details, exploit requires unauthenticated access to the webhook test endpoint.